Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/BrqYPUYtSI4oXY9wvfIBQ1DF7w8.roa
File:                     BrqYPUYtSI4oXY9wvfIBQ1DF7w8.roa (raw, json)
Hash identifier:          Yt1Q+W1Lhe7DunTXqbqv6iZKhXHV8wQYK0qwHCAMeOA=
Subject key identifier:   06:BA:98:3D:46:2D:48:8E:28:5D:8F:70:BD:F2:01:43:50:C5:EF:0F
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       50
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BrqYPUYtSI4oXY9wvfIBQ1DF7w8.roa
Signing time:             Mon 01 Jan 2024 01:30:57 +0000
ROA not before:           Mon 01 Jan 2024 01:30:57 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        126.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:57 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=06BA983D462D488E285D8F70BDF2014350C5EF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:1d:99:ec:42:3c:5a:a0:f9:19:d3:e2:a1:
                    46:9d:2c:7b:c4:f3:32:b4:58:6f:e6:de:2f:de:bd:
                    a6:88:3b:4c:14:9e:39:ec:48:f9:94:79:56:1a:75:
                    79:0a:b7:6f:44:0f:bc:34:3a:6e:52:3f:8f:91:50:
                    1a:1b:15:52:61:6c:0b:c0:6f:ce:f4:19:dd:e7:29:
                    d2:cb:c5:d4:a1:13:c8:33:d2:ac:00:98:61:9c:8d:
                    c9:a0:21:62:68:6d:7d:0b:61:57:41:dc:bb:c6:90:
                    9a:ec:25:af:0f:3f:98:25:bb:61:55:0b:e3:4a:51:
                    d9:3c:95:a5:65:a7:1a:21:04:45:53:2a:7b:b8:47:
                    e9:f9:38:3f:4d:9e:9f:2e:e3:3b:fe:27:59:df:9f:
                    c0:cd:b0:4b:13:e4:e8:12:36:05:31:a4:1f:5a:32:
                    04:17:79:ab:05:19:ac:40:24:46:44:6a:78:52:83:
                    75:49:f8:69:98:89:37:70:66:a4:d0:d1:ae:22:84:
                    bd:97:c3:f0:14:b8:07:95:2e:96:be:e7:8c:a1:5e:
                    b3:ac:cc:81:98:e6:21:06:0d:d5:0d:91:ca:1c:25:
                    3c:b4:1f:c4:e4:ae:f0:ed:49:a4:90:cc:d7:d9:73:
                    d2:12:e7:d1:be:e7:e5:c0:16:b3:d8:65:6e:4a:7c:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:98:3D:46:2D:48:8E:28:5D:8F:70:BD:F2:01:43:50:C5:EF:0F
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BrqYPUYtSI4oXY9wvfIBQ1DF7w8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:92:16:a9:57:a4:d1:1a:2b:1b:5e:e7:71:84:95:a4:07:9e:
         89:fe:25:fc:5a:18:a1:ea:4b:06:26:ad:e4:90:bd:ea:9a:5a:
         cd:f9:6e:df:57:e6:f5:90:cb:5e:36:96:1a:45:ca:93:60:ef:
         79:47:58:fc:16:41:cd:97:49:06:d7:ad:47:31:93:ec:49:d9:
         35:37:33:e8:23:4c:74:2a:b5:7a:7f:34:5b:49:a8:5d:2a:15:
         f2:7f:b0:87:d3:88:07:78:00:b2:0e:2e:d8:d4:54:09:72:7f:
         f2:b4:cb:9a:6b:bc:34:c3:1a:72:bc:21:33:72:1a:e7:e1:89:
         86:fe:5c:40:bd:fc:dc:5b:9b:ea:ba:ea:ea:5a:a7:c4:a5:26:
         a0:c8:27:e0:44:0c:d4:bc:fe:98:0e:63:a9:bf:c8:f9:09:c9:
         45:1a:dc:cd:02:3d:ac:19:95:1e:19:75:29:7d:f0:fe:e9:61:
         19:8f:1e:e8:d6:25:57:61:31:02:32:ba:10:5c:cf:57:7e:e0:
         11:82:7c:ba:aa:ce:87:74:b4:f3:4f:84:79:53:3c:cd:86:55:
         41:02:f9:bf:52:19:b6:80:55:ff:17:73:2a:7e:e2:37:65:e6:
         15:1a:15:1d:40:03:df:b2:f4:7f:36:84:1e:01:44:be:c8:06:
         66:bd:ae:2d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MDEwMTAx
MzA1N1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoMDZCQTk4M0Q0NjJENDg4
RTI4NUQ4RjcwQkRGMjAxNDM1MEM1RUYwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMarHZnsQjxaoPkZ0+KhRp0se8TzMrRYb+beL969pog7TBSeOexI
+ZR5Vhp1eQq3b0QPvDQ6blI/j5FQGhsVUmFsC8BvzvQZ3ecp0svF1KETyDPSrACY
YZyNyaAhYmhtfQthV0Hcu8aQmuwlrw8/mCW7YVUL40pR2TyVpWWnGiEERVMqe7hH
6fk4P02eny7jO/4nWd+fwM2wSxPk6BI2BTGkH1oyBBd5qwUZrEAkRkRqeFKDdUn4
aZiJN3BmpNDRriKEvZfD8BS4B5Uulr7njKFes6zMgZjmIQYN1Q2RyhwlPLQfxOSu
8O1JpJDM19lz0hLn0b7n5cAWs9hlbkp8po0CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQGupg9Ri1Ijihdj3C98gFDUMXvDzAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvQnJxWVBVWXRTSTRvWFk5d3ZmSUJRMURGN3c4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAH6QMA0GCSqGSIb3DQEBCwUAA4IBAQDNkhapV6TRGisbXudxhJWkB56J/iX8
Whih6ksGJq3kkL3qmlrN+W7fV+b1kMteNpYaRcqTYO95R1j8FkHNl0kG161HMZPs
Sdk1NzPoI0x0KrV6fzRbSahdKhXyf7CH04gHeACyDi7Y1FQJcn/ytMuaa7w0wxpy
vCEzchrn4YmG/lxAvfzcW5vquurqWqfEpSagyCfgRAzUvP6YDmOpv8j5CclFGtzN
Aj2sGZUeGXUpffD+6WEZjx7o1iVXYTECMroQXM9XfuARgny6qs6HdLTzT4R5UzzN
hlVBAvm/Uhm2gFX/F3MqfuI3ZeYVGhUdQAPfsvR/NoQeAUS+yAZmva4t
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:39 2024 by rpki-client on console-ams.rpki-client.org